Questions tagged [authoritative]

A DNS server that owns the main copy of zone records it serves including the Start of Authority (SOA) record is attributed with "authoritative". The same attribute is used for denoting the responses received from a server qualified as authoritative for a given zone by calling it as an "Authoritative Response".

Filter by
Sorted by
Tagged with
0 votes
0 answers
92 views

DNSSEC - Unable to sign the relevant files

I have set up a working DNS server on an Ubuntu 22.04 LTS as part of a single server (DNS, SPF, Email, firewall etc) IP: 192.168.122.189 Test Domain: jetj.ltd Hostname:mail The files I have are: db....
Kartibok's user avatar
1 vote
2 answers
62 views

.io auth. NS refuses UDP response to dnsviz.net – why shouldn’t I, too?

Seriously, say, I block (return, not drop of course) UDP :53 in to my authoritative nameserver. Resolvers will fall back to TCP and I won’t need any rate limiting against spoofed source IPs. Because ...
Al Klimov's user avatar
  • 100
2 votes
1 answer
2k views

Automate renewal of let's encrypt ACME-DNS challenge with unbound

I changed from a certificate with multiple explicitly defined subdomains to a wildcard certificate. For this to work, the DNS-01 challenge needs to be solved. I have a very basic unbound DNS server ...
Amon Bune's user avatar
0 votes
1 answer
239 views

STRATO: Is providing your own authoritative DNS server possible?

I am thinking about transferring my domain to STRATO (https://www.strato.de/). I have my own / external DNS server which I want to use as an authoritative DNS server. Sadly, the help pages do not ...
Amon Bune's user avatar
0 votes
1 answer
89 views

Querying the nameserver for NS record of a domain results in a non-authoritative answer

I was wondering why name server record need to be in the zone file, because the delegation is already done by the parent zone. I came across this answer. That answer makes sense, I suppose. Then I ...
user1720897's user avatar
0 votes
2 answers
64 views

Change host & nameservers at the same time

I am about to move hosts for my website. I need to change the nameserver (Siteground -> Cloudflare) as well as edit the A-record so that it points to the new host (SG -> Cloudways). Since I have ...
fischbrot's user avatar
1 vote
1 answer
143 views

How to Configure BIND as referral

I created a zone in a local BIND: zone "labs" { type master; file "/etc/bind/db.labs"; }; zone "foo.labs" { type master; file "/etc/bind/db.foo.labs&...
vinz's user avatar
  • 89
0 votes
1 answer
500 views

CloudFlare DNS, Google DNS, and OpenDNS will not recognize domain's nameservers

About 5 days ago I changed the nameservers on a domain (theswaffords.com) to AWS Route 53 nameservers. The domain is registered with iPage. It worked, and the site is accessible on some browsers. But ...
Iggny's user avatar
  • 3
0 votes
1 answer
133 views

Is authoritative nameserver IP address cached by Recursive resolver?

I know that A,AAAA records will be cached by Recursive resolver and stub resolver. When a person searches a subdomain/domain, if it is CNAME record which is searched, the Resolver gets the ...
Allen Johnson's user avatar
3 votes
2 answers
9k views

Why does dig not show the authority section and how to make it show the authoritative name servers that hold the DNS query`s answer?

I started recently to learn about DNS, and I got stuck when using dig command in Linux. More exactly, I'd like to see the authoritative name servers (their names or IP addresses) that hold the answers ...
jakeprog123's user avatar
-3 votes
1 answer
1k views

How can I setup two or multiple reverse zone for one IP with bind9?

When I try to define reverse zone with same IP the as reverse zone named-checkconf throws: $ named-checkconf named.conf.cust_zone named.conf:63: zone '70.231.168.192.in-addr.arpa': already exists ...
Sanaf's user avatar
  • 138
5 votes
2 answers
3k views

Why are there always at least two authoritative name servers for a registered domain?

I see that almost all registered domains have at least two authoritative name servers configured (and for most of them, exactly two), and that using two servers provides redundancy against any kind of ...
iBug's user avatar
  • 1,298
1 vote
1 answer
471 views

Is delegated DNS server authoritative server?

In the first picture, the order when making a query is client -> ISP DNS Server -> Root DNS -> Top Level DNS -> Authoritative name server. But in the second picture, the order is client -&...
null's user avatar
  • 11
2 votes
0 answers
562 views

Need help configuring BIND on Pfsense as an authoritative DNS Server

For a few weeks now I've tried configuring BIND Server on my Pfsense Router as an authoritative DNS Server. I own a domain bought from RoTLD, I've set my nameservers to my external static ip, and they ...
Andrei Nicola's user avatar
1 vote
1 answer
1k views

How does TLD DNS server find the specific authoritative nameserver containing required information?

Considering this article, DNS Server Types, by Cloudflare, there is a TLD nameserver that is responsible for finding the authoritative DNS server containing the required record. But how does the TLD ...
Mahan Lamee's user avatar
1 vote
0 answers
311 views

Advice on DNS good practice for LAN and public queries with DNSDist / recursor / powerdns

I am setting up a cluster of DNS that are soon going to reply to both LAN clients and public internet queries. On the internet is a special network (XX.YY.ZZ.AA/26) that I need to reply differently ...
Tomasito's user avatar
0 votes
1 answer
148 views

Nameserver response has no authoritative bit set

I know that the authoritative name servers for google.com are ns1-4.google.com. Now, I do this: dig google.com @ns1.google.com And the response is: ; <<>> DiG 9.11.3-1ubuntu1.8-Ubuntu &...
pathfinder's user avatar
2 votes
2 answers
1k views

Can't configure ADDITIONAL section in a BIND 9.8 authoritative DNS server

Glue records are supposed to be configured in the registrar when the DNS server hostname belongs to the same domain. It is not exactly my case because I am setting up the DNS server for a domain '...
Jose Manuel Gomez Alvarez's user avatar
-1 votes
1 answer
670 views

Can a non-authoritative name server give any response it likes to?

Our domain registrar allows us to either make use of our own DNS servers or to use theirs (configuring DNS entries in their web interface); I suppose this is a common situation. We have opted to set ...
Oliphaunt's user avatar
  • 119
5 votes
3 answers
3k views

Expose internal route53 DNS over VPN to on-premise ActiveDirectory

The situation We are migration our web-applications to AWS. To connect our on-premise network and AWS we have created a VPN connection. This works without problems. On-premise we have a MS AD (2008 ...
nvanesch's user avatar
  • 101
1 vote
0 answers
89 views

Monitoring self-hosted DNS, counting DNS requests in a time period

I have a self-hosted authoritative DNS server, using MaraDNS. We're having smaller periods of unresponsiveness during peak times. I'm guessing because of this it has to do with MaraDNS not having ...
Jono's user avatar
  • 117
0 votes
1 answer
155 views

Is there a way to have Bind act as an authoritative server for a zone with incomplete records?

Sorry i don't really know how to phrase the question, perhaps let me explain the scenario. Say I own the domain xyz.com, and I'm using AWS Route 53 as my DNS. I want to have someInternalStuff.xyz....
Justin Kiang's user avatar
1 vote
1 answer
2k views

Differing Internal vs External MX records

The setup: The business runs an internal DNS server not accessible to the public internet. The business's domain is registered with a registrar and the authoritative name servers outside the local ...
Digital ink's user avatar
0 votes
1 answer
232 views

I am confused about the Authoritative DNS Server actual definition

I search for this a lot and the answer is the same everywhere: Authoritative servers give either the answer or "NO", the host does not exist. Non-Authoritative servers use either cache or a ...
Shnd's user avatar
  • 275
0 votes
1 answer
3k views

PowerDNS authoritative name server works but non-authoritative name server servfail

In my current role as Devops I have been assigned a few tasks that are new to me including setting up a PDNS server with MySQL backend. After initial setup of the server I tested responses from the ...
jander924's user avatar
-1 votes
1 answer
40 views

DNS zone servicing concepts

Currently I am working out some concepts about how DNS works and am running into a question I can't easily find an answer to on the internet. I am looking for an answer based on a set of questions ...
User's user avatar
  • 61
1 vote
3 answers
2k views

Windows 2012 R2 Authorative DNS Server returns root hints

I have a non domain joined authoritative dns server for a zone, I've disabled dns recursion in server settings. When i do a query with dig @ns1.mydomain.tld . it returns the root hints. I've read ...
mt7's user avatar
  • 163
2 votes
2 answers
4k views

How to directly query authoritative DNS nameserver from command line, bypassing cached servers? [closed]

How can I directly query authoritative DNS nameserver from Linux and Mac OS X command line, bypassing cached servers? This is helpful when wanting to immediately verify newly-created DNS host names ...
Johnny Utahh's user avatar
2 votes
1 answer
331 views

Why would delegated nameservers ever be different to authoritative nameservers?

If you go on intodns.com and type in stackoverflow.com, the parent server tells me that nameservers for the domain are here: ns1.serverfault.com. ['198.252.206.80'] [TTL=172800] ns3.serverfault....
Lars's user avatar
  • 427
0 votes
0 answers
128 views

Authoritative DNS for other domain requirements

We're moving dns servers (managed with bind) for our main domain (let's call it main.org) to new servers. Since we're having some issues to update glue records with current registrar we thought to ...
Fabio's user avatar
  • 1,299
25 votes
3 answers
54k views

What is the difference between Authoritative Nameserver and Recursive Resolver?

I am new to networking and all this DNS thing. I have the following questions What is an Authoritative Nameserver ? What is a Recursive Resolver ? Please help/ guide me out on this. I have read ...
Yasser Shaikh's user avatar
0 votes
2 answers
3k views

Multiple authoritative DNS server on same IPv4 address

I'd like to maintain a DNS tunnel on my self-hosted server at example.com. I also have a DNS server on it, which serves everything for example.com. I'm currently using dns2tcp for DNS tunneling, on ...
Adrien Clerc's user avatar
3 votes
2 answers
6k views

Running dnsmasq as an authoritative DNS server

I am trying to implement a dynamic dns service for my computers. I have pointed h.lohray.com to my EC2 instance in the NS record of lohray.com and have installed dnsmasq on that system and have made ...
Lord Loh.'s user avatar
  • 1,079
0 votes
1 answer
103 views

dns hierarchy not returning ip address

(DNS1 ,WWW1, Gateway1) (sub-internal network) (DNS0,WWW0,Gateway0) (internal network) DNS1: 192.168.250.3/24 WWW1: 192.168.250.4/24 Gateway1: 192.168.250.1 /24 (internal) :: 192.168.0.150 ...
nikhilelite 's user avatar
2 votes
1 answer
2k views

Moving a Registered Authoritative Nameserver to Another Server

We had a colo server and registered a domain for it. When we did that we had to provide the name and the IP address of the nameservers (pointing to the server) as the nameserver names were within that ...
Dave's user avatar
  • 355
1 vote
2 answers
996 views

Help setting up a secondary authoritative DNS server

We have three Authoritative DNS servers and three recursive/caching DNS servers on my campus. Authoritative servers DNS1- Windows 2003 DNS2- Old Red Hat -----> Replacing w/ newer version DNS3- ...
IOTAMAN's user avatar
  • 665
1 vote
2 answers
3k views

Multiple nameservers, how do they work when they can't resolve a query?

I have 4 nameserver set for my domain: ns1.nameserver.com, ns2.nameserver.com, ect... I know that if one is down an other one will be used. But if the first is up and running and is asked for a ...
Andrea Ambu's user avatar